CVE-2014-0400

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server...

CVE-2014-0400

CVE-2014-0400 affects Oracle Fusion Middleware’s Oracle Internet Directory (OID) LDAP server in versions 11.1.1.6 and 11.1.1.7, described as an unspecified vulnerability that allows remote authenticated users to compromise confidentiality via the OID LDAP server. Concrete connected documents prov...

Oracle Linux 5 : Critical: / firefox (ELSA-2007-0400)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0400 advisory. 1.5.0.12-0.1.el4.1.0 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.1.el4 - Update to...

CVE-2013-0400

CVE-2013-0400 is a local, unspecified vulnerability affecting Oracle Solaris 9 and 10. The connected documents describe two Solaris subcomponents as affected: Utility/Umount and Filesystem/cachefs. The common impact is escalation of privileges, potentially leading to an OS takeover and arbitrary ...

Mod_Auth_OpenID Session Stealing

https://github.com/paranoid/modauthopenid/blob/master/CVE-2012-2760.markdown Security Advisory 1201 Summary : Session stealing Date : May 2012 Affected versions : all versions prior to modauthopenid-0.7 ID : modauthopenid-1201 CVE reference : CVE-2012-2760 Details Session ids are stored insecurel...

CVE-2012-0400

EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2012-0400

CVE-2012-0400 affects EMC RSA enVision 4.x (before 4.1 Patch 4). The root cause is improper restriction of the number of failed authentication attempts, enabling brute-force-style remote access. The entry’s impact is a complete breach of confidentiality, integrity, and availability for affected s...

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...

CVE-2011-0400

CVE-2011-0400 affects Piwik prior to 1.1. Cookie.php fails to set the secure flag on the session cookie in HTTPS sessions, enabling potential interception of the session cookie over HTTP. This is the nature and impact as described; no remediation details are provided in the referenced documents.

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

RHEL 5 : tetex (RHSA-2010:0400)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Debian Security Advisory DSA 2030-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 2030-1. OpenVAS Vulnerability Test $Id: deb20301.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2030-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: mahara

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-2030-1 : mahara - sql injection

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is not properly escaping input when generating a unique username based on a remote user name from a single sign-on application. An attacker can use this to compromise the mahara database via crafted user names...

CVE-2010-0400

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

CVE-2010-0400

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username...

CVE-2010-0400

CVE-2010-0400 affects mahara 1.0.4, with a SQL injection in lib/user.php exploitable via the username. Multiple openvas/Red Hat/Debian entries confirm the issue and tie it to improper handling/escaping when generating a unique username from a remote user (SSO). Impact: remote attacker could alter...

[SECURITY] [DSA 2030-1] New mahara packages fix sql injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2030-1 [email protected] http://www.debian.org/security/ Nico Golde April 6th, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2030-1] New mahara packages fix sql injection

-------------------------------------------------------------------------- Debian Security Advisory DSA-2030-1 [email protected] http://www.debian.org/security/ Nico Golde April 6th, 2010 http://www.debian.org/security/faq -...

CVE-2009-0400

CVE-2009-0400 is an SQL injection in SocialEngine’s Blog Plugin (blog.php) via the category_id parameter. The vulnerability affects SocialEngine 3.06 trial and allows an unauthenticated remote attacker to manipulate database queries, potentially leading to sensitive information disclosure or data...